CVE-2026-116139
WWBN AVideo 26.0 through 29.3.0 Stored XSS via Comment Markdown Rendering
CVSS v3.1 (listed by NVD)
—
Not scored
CVSS v4.0 (listed by NVD)
—
Not scored
CVSS (listed by CVE.org)
5.1
MEDIUM
Scored by CNA (VulnCheck) · v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
EPSS exploit probability
—
Not computed
CISA KEV
—
Not listed
Attack conditions and impact
Derived from the CNA CVSS 4.0 vector
NetworkLoginUser action
Scope change
Confidentiality LIntegrity LAvailability N
| Metric | Value | Meaning |
|---|---|---|
| Attack vector AV | N | Network |
| Attack complexity AC | L | Low (easy) |
| Attack requirements AT | N | None |
| Privileges required PR | L | Regular user |
| User interaction UI | P | Passive |
| Confidentiality (vulnerable system) VC | L | Low |
| Integrity (vulnerable system) VI | L | Low |
| Availability (vulnerable system) VA | N | None |
| Confidentiality (subsequent systems) SC | L | Low |
| Integrity (subsequent systems) SI | L | Low |
| Availability (subsequent systems) SA | N | None |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
Description
CNA (VulnCheck)
WWBN AVideo 26.0 through 29.3.0 contains a stored cross-site scripting vulnerability that allows authenticated commenters to inject JavaScript because markDownToHTML() preserves event-handler attributes in leading HTML blocks. Attackers can post a comment starting with an img tag carrying an onerror handler, which bypasses the inline sanitizer and executes in viewers' browsers under the application origin.
CVSS assessments
| Provider | Version | Score | Vector |
|---|---|---|---|
| CNA / VulnCheck | 4.0 | 5.1 MEDIUM | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N |
| CNA / VulnCheck | 3.1 | 5.4 MEDIUM | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Affected products and packages
CNA (CVE.org)
| Vendor | Product | Versions |
|---|---|---|
| WWBN | AVideo | affected: 26.0 … <= 29.3.0 default: unaffected |
Linux distribution status
References (3)
- https://github.com/WWBN/AVideo/commit/f13587c59346b4bf0f449273021d29b869594559 CNA patch
- https://github.com/WWBN/AVideo/security/advisories/GHSA-cx46-26xc-2w7f CNA vendor-advisory
- https://www.vulncheck.com/advisories/wwbn-avideo-26.0-through-29.3.0-stored-xss-via-comment-markdown-rendering CNA third-party-advisory